7

I am concerned about the potential attack surface exposed by JavaScript typed arrays as a means of performing rowhammer attacks.

Is it possible to disable (via official means or otherwise) typed arrays in firefox?

2

There are no means to disable typed arrays in the browser. Much like you can't disable the use of 'img src' or 'a href' tags in the code.

What you can do however is prevent the execution of javascript via this method.

In Firefox

  1. typed 'about:config' in the address bar
  2. Click "I accept the risk" on the dialogue box that comes up
  3. Type 'javascript.enabled' in the search section
  4. Right click on 'javascript.enabled' and select 'Toggle'
  5. You can then close the tab.

Firefox will not load javascript from then on.

2
  • Unfortunately, client security is not a concern for site developpers, and many site can simply not be used without javascript. IMHO it is a shame, but life is like that... – Serge Ballesta Feb 23 '17 at 10:19
  • @SergeBallesta yeah man. That's why there's check and balances to minimise the risk. Guides like OWASP top 10, OWASP ASVS, Secure Coding Best Practices. With the guides, there's really no excuse not to follow. – Lester T. Feb 23 '17 at 10:33

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.